This commit adds support for the IPv6 NAT table on Linux 3.8 and up,
using the $kernelmajversion fact. As far as I know this is omnipresent.
Without this commit, behaviour is:
If a user creates nat-table ipv6 rules through this module, on an
older kernel, the file will not load as those rules are not valid
for the filter table. User ends up with no v6 firewall loaded at all.
If no nat-table rules are created, things work just fine.
With this commit, behaviour is:
If a user creates nat-table ipv6 rules through this module,
on kernel >= 3.8, the nat rules will be applied
on an older kernel, the file will not load as the rules are not valid
for the filter table. User ends up with no v6 firewall loaded at all.
If no nat-table rules are created,
on kernel >= 3.8, an empty nat table header is inserted in the rules,
and things work just fine.
alvagante
commented
8 years ago
This commit adds support for the IPv6 NAT table on Linux 3.8 and up, using the $kernelmajversion fact. As far as I know this is omnipresent.
Without this commit, behaviour is:
With this commit, behaviour is:
Closes #73.